Name: State of the Cloud Application Security: Insights into 2024
Start: 2023-12-07T07:00:00Z
End: 2023-12-07T07:01:00.000Z
Location: BrightTALK
Rating: 0

Radware is a global leader of cyber security and application delivery solutions for physical, cloud, and software defined data centers. Its award-winning solutions portfolio secures the digital experience by providing infrastructure, application, and corporate IT protection and availability services to enterprises globally. Radware’s solutions empower enterprise and carrier customers worldwide to adapt to market challenges quickly, maintain business continuity and achieve maximum productivity while keeping costs down. For more information, please visit www.radware.com.

Join us for an exclusive partner webinar where we'll delve into the complexities of combating Web DDoS attacks in the Healthcare, Financial, and State, Local, and Education (SLED) verticals. In this information-packed session, you'll gain valuable insights into the unique challenges faced by organizations in these sectors and discover how Radware's cutting-edge DDoS protection solution is tailored to provide robust security, ensuring uninterrupted operations.

Are you ready for the next wave of disruptive DDoS attacks?

Web application attacks have grown by a staggering 500% in 2023, meaning that applications today are at risk more than ever before. Attack activity has increased across all main attack vectors – bad bots, APIs, web application attacks, and DDoS attack – and over 40% of organizations see all four of these attack vectors on a weekly basis, or even more frequently.

Radware’s latest Application Security in a Multi-Cloud World 2023 report covers the latest figures and trends in cloud application security, where web applications are deployed, what threats they face, and how they are protected. 
As we move into 2024, understanding these trends is critical to protecting your applications against the modern threat environment.

Join this webinar with experts from Osterman Research and Radware to discuss the latest report findings, and what they mean for you.

In this webinar you will learn:
• Why 61% of organizations think that lack of protection between multiple cloud platforms is a “problem” or an “extreme problem”
• How bot attacks are the most frequently occurring type of application attack, with over 80% of organizations seeing them on a daily, weekly, or monthly basis
• Why 66% of organizations wouldn’t be very surprised if their APIs got breached tomorrow
• And much more!

About Our Speakers:
Michael Sampson is the Principal Analyst at Osterman Research, with broad interests in cybersecurity, data protection and information governance. 
Eyal Arazi is a Senior Manager for Portfolio Strategy at Radware, responsible at Radware for defining market strategy in the fields of cloud security and application protection.

State of the Cloud Application Security: Insights into 2024

I nyligen genomförda DDoS-attacker ser vi utvecklingen av de metoder cyberbrottslingar använder. De har höjt insatserna genom att använda en mängd olika typer av attacker och vektorer i sina kampanjer. Dessa brottslingar kombinerar attacker på både nätverk- och applikationsnivå, utnyttjar nya verktyg för att skapa sofistikerade attacker som utmanar möjligheten att upptäckas och förmågan att på ett intelligent sätt särskilja attacktrafik från legitim trafik.

Den senaste arsenalen av verktyg som hackarna har tillgång till har lett till en ny typ av angrepp – L7 HTTPS-flood attacks, allmänt kända som "Web DDoS Tsunami". Dessa attacker är inte bara mer sofistikerade utan också otroligt aggressiva och kännetecknas av ett högt flöde av förfrågningar per sekund (RPS). Attacken är dessutom krypterad för att undvika eventuella skyddsmetoder där man även emulerar legitima transaktioner och använder sig av en omfattande distribution av botnätverk.

Delta i detta tekniska webbseminarium där vi granskar detaljerna kring dessa nya attacker och verktyg. Vi kommer också att undersöka olika attacktyper och utforska lämpliga metoder för att identifiera och mitigera dessa attacker. Håll dig steget före moderna cyberhot genom att delta i denna informativa session.

Web DDoS Tsunami: Utmaningar och Lösningar

For long time WAF were the signinum to application protection. But the traditional on-prem WAF is no longer enough to protect applications against new threats (like bots, web DDoS), and protect all of their vulnerable surfaces (like API, client side). In this session we will dive into the various aspects which require organizations to reasses their use of on on-prem WAF and what are the best alternatives that will ensure their applications will remain protected.

Why on Prem WAF solutions are no longer enough or relevant

For long time WAF were the signinum to application protection, but the traditional on-prem WAF is no longer enough to protect applications against new threats (like bots, web DDoS), and protect all of their vulnerable surfaces (like API, client side). 

In this session we will dive into the various aspects which require organizations to reassess their use of on-prem WAF and what are the best alternatives that will ensure their applications will remain protected.

With the rapid growth in online usage, it is imperative to prioritize the security and scalability of applications and networks in the face of increasing cyber threats. The emergence of human-like bots capable of circumventing traditional security measures has underscored the importance of adopting a zero-trust approach and embracing cloud service edge solutions. In this presentation, we will discuss the most noteworthy developments in the field of cybersecurity and propose how your organization can leverage them to its advantage.
 
The key topics include:
 
- Network and Application Security Trends: A forward-looking analysis of what to anticipate in the year 2024 and beyond.
- Challenges Shaping Your Security Strategy: An examination of the challenges that will have a pivotal influence on your organization's security posture.
- Best Practices for Balancing Cost, Agility, and State-of-the-Art Security: Guidance on navigating the balance between cost-effectiveness, operational agility, and the implementation of cutting-edge security measures.

Future Trends in Application and Network Security-Looking Ahead to 2024 & Beyond

With the rapid growth in online usage, it is imperative to prioritize the security and scalability of applications and networks in the face of increasing cyber threats. The emergence of human-like bots capable of circumventing traditional security measures has underscored the importance of adopting a zero-trust approach and embracing cloud service edge solutions. In this presentation, we will discuss the most noteworthy developments in the field of cybersecurity and propose how your organization can leverage them to its advantage.
 
The key topics include:
 - Network and Application Security Trends: A forward-looking analysis of what to anticipate in the year 2024 and beyond.
- Challenges Shaping Your Security Strategy: An examination of the challenges that will have a pivotal influence on your organization's security posture.
- Best Practices for Balancing Cost, Agility, and State-of-the-Art Security: Guidance on navigating the balance between cost-effectiveness, operational agility, and the implementation of cutting-edge security measures.

As the year's biggest shopping season approaches, Black Friday becomes a battleground for online retailers, where not only shoppers but also fraudsters and cybercriminals swarm. This surge in online traffic brings a wave of bot attacks, ranging from individual price bidding manipulations to complex account takeover efforts orchestrated by cybercriminals, and content and price scraping by competing unethical organizations.

At Radware, our researchers consistently observe this spike in bot activity from October to December, which poses a significant threat to businesses during critical sales periods. In this insightful webinar, Radware's Sr. Product Marketing Manager, Uri Dorot, will delve into:

Key E-commerce Threats: Understand the diverse range of threats faced during the holiday season, backed by relevant statistics.

Early Digital Property Protection: Explore why safeguarding your online presence well in advance of Cyber Week is imperative for your business's security.

Effective Strategies: Learn best practices and effective strategies to proactively protect your digital assets from various bot attacks.

Bot Protection Without CAPTCHA: Discover innovative ways to fend off bots without inconveniencing genuine users with traditional CAPTCHA methods.

Securing Native Mobile Applications: Gain insights into specific security measures tailored for native mobile applications, ensuring comprehensive protection across platforms.

Don't miss this opportunity to bolster your cybersecurity strategy and safeguard your business from malicious attacks during the holiday sales season. Join us for this webinar and stay one step ahead of cyber threats.

Securing Business from Bot Attacks & Optimizing Online Holiday Season Revenue

Cloud migration is over. Now comes the multi-cloud. Organizations are no longer migrating to the cloud; they’re already there. But the next iteration of the cloud movement is already in progress: the expansion to multi-cloud. But while deploying applications across multiple cloud environments has its advantages, it also comes at a cost to security, especially when it comes to security consistency, management, and visibility. In this session we will discuss some of the key trends in deploying web applications across multiple clouds, the security challenges that arise from that, and best practices to secure your applications in the multi-cloud. 

Join this session to learn: 
• What are the key stats and trends in multi-cloud adoption 
• How deploying web applications across multiple cloud environments impacts security 
• What are the security risks associated with multi-cloud application protection 
• What are some practical and actionable best practices for organizations to mitigate the risks of multi-cloud application security

Protecting Web Applications in a Multi-Cloud World

Most organizations deploy applications across multiple environments, including on-premises, private cloud, and public cloud—in many cases using the native tools of each cloud environment. 

Inadvertently, this investment leads to diverse stacks of network and application security tools for each cloud, requiring organizations to tackle disparate security silos with inconsistent policies, isolated logging and reporting, and fragmented management.

Fear not. This exclusive Fireside Chat with experts from Radware and Enterprise Strategy Group (ESG) will discuss what your organization can do to escape these application security silos in multi-cloud environments.

Watch the session to glean the takeaways, to prevent cloud risk exposure, and to discover recent multi-cloud security trend data from Radware’s latest Application Protection in a Multi-Cloud World report.

Managing Application Security in the Multi-Cloud: Escaping Security Silos

ההתקפה של חמאס על מדינת ישראל מלווה בעליה חדה בהתקפות סייבר על אתרי חברות וגופי ממשל בישראל.
הצטרפו לוובינר זה כדי ללמוד ולהתעדכן
מיהם גופי הסייבר שעומדים מאחורי ההתקפות על מדינת ישראל
מהן מטרות התקיפה ומאפייני ההתקפות
איך נראית התקפת סייבר בצד המותקף
כיצד נערכים להגנה כנגד התקפות אלו

עליה בהתקפות סייבר על אתרים ישראליים: עידכון מחדר המצב של רדוור ואסטרטגיות הגנה

En los últimos ataques DDoS registrados, los atacantes están utilizando múltiples tipos de ataques y vectores como parte de sus campañas, combinando ataques en capa de red y en capa de aplicación, aprovechando nuevas herramientas para crear ataques sofisticados que son más difíciles, y a veces imposibles, de detectar y mitigar con métodos tradicionales.

Con estas nuevas herramientas, los atacantes generan nuevos tipos de ataques de inundación HTTPS, ataques conocidos como Web DDoS Tsunami. Estos son más sofisticados y agresivos, tienen alto volumen de solicitudes (RPS), el tráfico viaja cifrado, utilizan técnicas de evasión para eludir las protecciones, emulan transacciones legítimas y son altamente distribuidos.

Acompáñenos en este Webcast técnico, donde les demostraremos las nuevas técnicas y herramientas de ataques, analizaremos los tipos de ataque y las técnicas de detección y mitigación apropiadas.

WebDDoS Tsunami! Desafíos y Soluciones

Victor Zhora, Head of Digital Transformation at Ukraine's State Service for Special Communications and Information Protection will be interviewed by Radware and will reveal the types and techniques of attack the Ukrainian government faces during the Russian-Ukrainian conflict, the countermeasures it employs, and what "a day at the office" looks like in the event of cyberwar.
In this presentation, also hear about the intelligence Radware’s Emergency Response Team gathered from their experience fighting Hacktivist groups as well as new defense techniques that were developed to improve their protection.

Les Assises: Lessons learned from cyber warfare: insights from Ukraine

L'anno 2023 potrebbe essere considerato l'anno della rinascita hacktivista. Solo in Italia, questi gruppi hanno rivendicato la responsabilità di quasi 50 attacchi DDOS riusciti da metà giugno.
Ciò che è ancora più preoccupante è che le tecniche di attacco DDoS utilizzate da questi gruppi si sono evolute considerevolmente, mettendo in seria difficoltà le aziende e le autorità pubbliche prese di mira. Si tratta principalmente di attacchi "Web DDOS" di ultima generazione.
Partecipa a questo webinar con gli esperti Radware per conoscere le caratteristiche della nuova ondata di attacchi e perché le soluzioni standard non siano efficaci di fronte alle nuove tecniche hacktiviste.

Nuovi attacchi "Web DDoS": come proteggersi

In this webinar, we will explore the fundamental building blocks required to construct an effective security and disaster recovery (DR) strategy in a cloud-native context. These encompass adopting a zero-trust approach for access and implementing comprehensive safeguards for networks, infrastructure, and applications to thwart cyber threats. Equally important, the strategy should ensure uninterrupted operations and swift recovery in the event of system outages or catastrophic events. By harmonizing these foundational elements, organizations can establish a secure and resilient cloud ecosystem that offers robust protection against potential threats while enabling rapid restoration in times of crisis. 
 
Key topics covered include:
• Overview of cloud-native environments and the need for a robust security and disaster recovery (DR) strategy.
• Common use cases and building blocks for security and availability.
• Best practices to harden your network, infrastructure, and application security and availability posture.

Building Blocks for a Cloud Native Security and DR Strategy

Cloud Applications

Cloud Security

Bots

APIs

DDoS

Web Application Security

Security

Security as a Service

Cloud computing has exploded over the past few years, delivering a previously unimagined level of workplace mobility and flexibility. The cloud computing community on BrightTALK is made up of thousands of engaged professionals learning from the latest cloud computing research and resources. Join the community to expand your cloud computing knowledge and have your questions answered in live sessions with industry experts and vendor representatives.

Cloud Computing

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

The data center management community focuses on the holistic management and optimization of the data center. From technologies such as virtualization and cloud computing to data center design, colocation, energy efficiency and monitoring, the BrightTALK data center management community provides the most up-to-date and engaging content from industry experts to better your infrastructure and operations. Engage with a community of your peers and industry experts by asking questions, rating presentations and participating in polls during webinars, all while you gain insight that will help you transform your infrastructure into a next generation data center.

Data Center Management

Join thousands of engaged IT professionals in the application management community on BrightTALK. Interact with your peers in relevant webinars and videos on the latest trends and best practices for application lifecycle management, application performance management and application development.

Application Management

Network infrastructure professionals understand that a reliable and secure infrastructure is crucial to enabling business execution. Join the network infrastructure community to interact with thousands of IT professionals. Browse hundreds of on-demand and live webinars and videos to learn about the latest trends in network computing, SDN, WAN optimization and more.

Network Infrastructure

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

State of the Cloud Application Security: Insights into 2024

Presented by

About this talk

More from this channel